 @@ -1,421 +1,438 @@
-/*	$NetBSD: pmc.c,v 1.7 2017/05/23 08:54:39 nonaka Exp $	*/
+/*	$NetBSD: pmc.c,v 1.8 2017/06/14 17:48:40 maxv Exp $	*/
 /*
  * Copyright (c) 2017 The NetBSD Foundation, Inc.
  * All rights reserved.
+ *
  * This code is derived from software contributed to The NetBSD Foundation
  * by Maxime Villard.
+ *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
  *    documentation and/or other materials provided with the distribution.
+ *
  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
  * POSSIBILITY OF SUCH DAMAGE.
  */
 /*
  * Copyright (c) 2000 Zembu Labs, Inc.
  * All rights reserved.
+ *
  * Author: Jason R. Thorpe <thorpej@zembu.com>
+ *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
  *    documentation and/or other materials provided with the distribution.
  * 3. All advertising materials mentioning features or use of this software
  *    must display the following acknowledgement:
  *	This product includes software developed by Zembu Labs, Inc.
  * 4. Neither the name of Zembu Labs nor the names of its employees may
  *    be used to endorse or promote products derived from this software
  *    without specific prior written permission.
+ *
  * THIS SOFTWARE IS PROVIDED BY ZEMBU LABS, INC. ``AS IS'' AND ANY EXPRESS
  * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WAR-
  * RANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DIS-
  * CLAIMED.  IN NO EVENT SHALL ZEMBU LABS BE LIABLE FOR ANY DIRECT, INDIRECT,
  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 /*
  * Interface to x86 CPU Performance Counters.
  */
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: pmc.c,v 1.7 2017/05/23 08:54:39 nonaka Exp $");
+__KERNEL_RCSID(0, "$NetBSD: pmc.c,v 1.8 2017/06/14 17:48:40 maxv Exp $");
 #include <sys/param.h>
 #include <sys/systm.h>
 #include <sys/proc.h>
 #include <sys/cpu.h>
 #include <sys/xcall.h>
 #include <sys/kauth.h>
 #include <machine/cpufunc.h>
 #include <machine/cpuvar.h>
 #include <machine/specialreg.h>
 #include <machine/sysarch.h>
 #include <machine/pmc.h>
 #include <machine/cpu_counter.h>
 #include <machine/cputypes.h>
 #include <machine/i82489reg.h>
 #include <machine/i82489var.h>
 #include <x86/nmi.h>
 #define NEVENTS_SAMPLE	500000
 typedef struct {
 	bool running;
 	uint32_t evtmsr;	/* event selector MSR */
 	uint64_t evtval;	/* event selector value */
 	uint32_t ctrmsr;	/* counter MSR */
 	uint64_t ctrinitval;	/* initial counter value */
 	uint64_t ctrmaxval;	/* maximal counter value */
 	uint64_t ctrmask;
 } pmc_state_t;
 static nmi_handler_t *pmc_nmi_handle;
 static uint32_t pmc_lapic_image[MAXCPUS];
 static x86_pmc_cpuval_t pmc_val_cpus[MAXCPUS] __aligned(CACHE_LINE_SIZE);
 static kmutex_t pmc_lock;
 static pmc_state_t pmc_state[PMC_NCOUNTERS];
 static uint32_t pmc_ncounters __read_mostly;
 static int pmc_type __read_mostly;
 static int
 pmc_nmi(const struct trapframe *tf, void *dummy)
+{
 	struct cpu_info *ci = curcpu();
 	pmc_state_t *pmc;
 	size_t i;
 	if (pmc_type == PMC_TYPE_NONE) {
 		return 0;
+	}
 	for (i = 0; i < pmc_ncounters; i++) {
 		pmc = &pmc_state[i];
 		if (!pmc->running) {
 			continue;
+		}
 		/* XXX make sure it really comes from this PMC */
 		break;
+	}
 	if (i == pmc_ncounters) {
 		return 0;
+	}
 	/* Count the overflow, and restart the counter */
 	pmc_val_cpus[cpu_index(ci)].overfl++;
 	wrmsr(pmc->ctrmsr, pmc->ctrinitval);
 	return 1;
+}
 static void
 pmc_read_cpu(void *arg1, void *arg2)
+{
 	pmc_state_t *pmc = (pmc_state_t *)arg1;
 	struct cpu_info *ci = curcpu();
 	pmc_val_cpus[cpu_index(ci)].ctrval =
 	    (rdmsr(pmc->ctrmsr) & pmc->ctrmask) - pmc->ctrinitval;
+}
 static void
 pmc_apply_cpu(void *arg1, void *arg2)
+{
 	pmc_state_t *pmc = (pmc_state_t *)arg1;
 	bool start = (bool)arg2;
 	struct cpu_info *ci = curcpu();
 	if (start) {
 		pmc_lapic_image[cpu_index(ci)] = lapic_readreg(LAPIC_PCINT);
 		lapic_writereg(LAPIC_PCINT, LAPIC_DLMODE_NMI);
+	}
 	wrmsr(pmc->ctrmsr, pmc->ctrinitval);
 	switch (pmc_type) {
 	case PMC_TYPE_I686:
 	case PMC_TYPE_K7:
 	case PMC_TYPE_F10H:
 		wrmsr(pmc->evtmsr, pmc->evtval);
 		break;
+	}
 	pmc_val_cpus[cpu_index(ci)].ctrval = 0;
 	pmc_val_cpus[cpu_index(ci)].overfl = 0;
 	if (!start) {
 		lapic_writereg(LAPIC_PCINT, pmc_lapic_image[cpu_index(ci)]);
+	}
+}
 static void
 pmc_read(pmc_state_t *pmc)
+{
 	uint64_t xc;
 	xc = xc_broadcast(0, pmc_read_cpu, pmc, NULL);
 	xc_wait(xc);
+}
 static void
 pmc_apply(pmc_state_t *pmc, bool start)
+{
 	uint64_t xc;
 	xc = xc_broadcast(0, pmc_apply_cpu, pmc, (void *)start);
 	xc_wait(xc);
 	pmc->running = start;
+}
 static void
 pmc_start(pmc_state_t *pmc, struct x86_pmc_startstop_args *args)
+{
 	uint64_t event, unit;
 	/*
 	 * Initialize the counter MSR.
 	 */
 	pmc->ctrinitval = pmc->ctrmaxval - NEVENTS_SAMPLE;
 	/*
 	 * Initialize the event MSR.
 	 */
 	switch (pmc_type) {
 	case PMC_TYPE_I686:
 		pmc->evtval = args->event | PMC6_EVTSEL_EN | PMC6_EVTSEL_INT |
 		    (args->unit << PMC6_EVTSEL_UNIT_SHIFT) |
 		    ((args->flags & PMC_SETUP_KERNEL) ? PMC6_EVTSEL_OS : 0) |
 		    ((args->flags & PMC_SETUP_USER) ? PMC6_EVTSEL_USR : 0) |
 		    ((args->flags & PMC_SETUP_EDGE) ? PMC6_EVTSEL_E : 0) |
 		    ((args->flags & PMC_SETUP_INV) ? PMC6_EVTSEL_INV : 0) |
 		    (args->compare << PMC6_EVTSEL_COUNTER_MASK_SHIFT);
 		break;
 	case PMC_TYPE_K7:
 		event = (args->event & K7_EVTSEL_EVENT);
 		unit = (args->unit << K7_EVTSEL_UNIT_SHIFT) &
 		    K7_EVTSEL_UNIT;
 		pmc->evtval = event | unit | K7_EVTSEL_EN | K7_EVTSEL_INT |
 		    ((args->flags & PMC_SETUP_KERNEL) ? K7_EVTSEL_OS : 0) |
 		    ((args->flags & PMC_SETUP_USER) ? K7_EVTSEL_USR : 0) |
 		    ((args->flags & PMC_SETUP_EDGE) ? K7_EVTSEL_E : 0) |
 		    ((args->flags & PMC_SETUP_INV) ? K7_EVTSEL_INV : 0) |
 		    (args->compare << K7_EVTSEL_COUNTER_MASK_SHIFT);
 		break;
 	case PMC_TYPE_F10H:
 		event =
 		    ((uint64_t)(args->event & 0x00FF) <<
 		     F10H_EVTSEL_EVENT_SHIFT_LOW) |
 		    ((uint64_t)(args->event & 0x0F00) <<
 		     F10H_EVTSEL_EVENT_SHIFT_HIGH);
 		unit = (args->unit << F10H_EVTSEL_UNIT_SHIFT) &
 		    F10H_EVTSEL_UNIT_MASK;
 		pmc->evtval = event | unit | F10H_EVTSEL_EN | F10H_EVTSEL_INT |
 		    ((args->flags & PMC_SETUP_KERNEL) ? F10H_EVTSEL_OS : 0) |
 		    ((args->flags & PMC_SETUP_USER) ? F10H_EVTSEL_USR : 0) |
 		    ((args->flags & PMC_SETUP_EDGE) ? F10H_EVTSEL_EDGE : 0) |
 		    ((args->flags & PMC_SETUP_INV) ? F10H_EVTSEL_INV : 0) |
 		    (args->compare << F10H_EVTSEL_COUNTER_MASK_SHIFT);
 		break;
+	}
 	/*
 	 * Apply the changes.
 	 */
 	pmc_apply(pmc, true);
+}
 static void
 pmc_stop(pmc_state_t *pmc, struct x86_pmc_startstop_args *args)
+{
 	pmc->evtval = 0;
 	pmc->ctrinitval = 0;
 	pmc_apply(pmc, false);
+}
 void
 pmc_init(void)
+{
 	const char *cpu_vendorstr;
 	struct cpu_info *ci;
 	size_t i;
 	pmc_type = PMC_TYPE_NONE;
 	if (cpu_class != CPUCLASS_686)
 		return;
 	ci = curcpu();
 	cpu_vendorstr = (char *)ci->ci_vendor;
 	if (strncmp(cpu_vendorstr, "GenuineIntel", 12) == 0) {
 		/* Right now we're missing Pentium 4 support. */
 		if (cpuid_level == -1 ||
 		    CPUID_TO_FAMILY(ci->ci_signature) == CPU_FAMILY_P4)
 			return;
 		pmc_type = PMC_TYPE_I686;
 		pmc_ncounters = 2;
 		for (i = 0; i < pmc_ncounters; i++) {
 			pmc_state[i].evtmsr = MSR_EVNTSEL0 + i;
 			pmc_state[i].ctrmsr = MSR_PERFCTR0 + i;
 			pmc_state[i].ctrmaxval = (UINT64_C(1) << 40) - 1;
 			pmc_state[i].ctrmask = 0xFFFFFFFFFFULL;
+		}
 	} else if (strncmp(cpu_vendorstr, "AuthenticAMD", 12) == 0) {
 		if (CPUID_TO_FAMILY(ci->ci_signature) == 0x10) {
 			pmc_type = PMC_TYPE_F10H;
 			pmc_ncounters = 4;
 			for (i = 0; i < pmc_ncounters; i++) {
 				pmc_state[i].evtmsr = MSR_F10H_EVNTSEL0 + i;
 				pmc_state[i].ctrmsr = MSR_F10H_PERFCTR0 + i;
 				pmc_state[i].ctrmaxval =
 				    (UINT64_C(1) << 48) - 1;
 				pmc_state[i].ctrmask = 0xFFFFFFFFFFFFULL;
+			}
 		} else {
 			/* XXX: make sure it is at least K7 */
 			pmc_type = PMC_TYPE_K7;
 			pmc_ncounters = 4;
 			for (i = 0; i < pmc_ncounters; i++) {
 				pmc_state[i].evtmsr = MSR_K7_EVNTSEL0 + i;
 				pmc_state[i].ctrmsr = MSR_K7_PERFCTR0 + i;
 				pmc_state[i].ctrmaxval =
 				    (UINT64_C(1) << 48) - 1;
 				pmc_state[i].ctrmask = 0xFFFFFFFFFFFFULL;
+			}
+		}
+	}
 	pmc_nmi_handle = nmi_establish(pmc_nmi, NULL);
 	mutex_init(&pmc_lock, MUTEX_DEFAULT, IPL_NONE);
+}
 int
 sys_pmc_info(struct lwp *l, struct x86_pmc_info_args *uargs, register_t *retval)
+{
 	struct x86_pmc_info_args rv;
 	int error;
 	error = kauth_authorize_machdep(l->l_cred, KAUTH_MACHDEP_X86PMC,
 	    NULL, NULL, NULL, NULL);
 	if (error)
 		return error;
 	memset(&rv, 0, sizeof(rv));
 	rv.vers = PMC_VERSION;
 	rv.type = pmc_type;
 	rv.nctrs = pmc_ncounters;
 	return copyout(&rv, uargs, sizeof(rv));
+}
 int
 sys_pmc_startstop(struct lwp *l, struct x86_pmc_startstop_args *uargs,
     register_t *retval)
+{
 	struct x86_pmc_startstop_args args;
 	pmc_state_t *pmc;
 	bool start;
 	int error;
 	error = kauth_authorize_machdep(l->l_cred, KAUTH_MACHDEP_X86PMC,
 	    NULL, NULL, NULL, NULL);
 	if (error)
 		return error;
 	if (pmc_type == PMC_TYPE_NONE)
 		return ENODEV;
 	error = copyin(uargs, &args, sizeof(args));
 	if (error)
 		return error;
 	if (args.counter >= pmc_ncounters)
 		return EINVAL;
 	start = (args.flags & (PMC_SETUP_KERNEL|PMC_SETUP_USER)) != 0;
 	pmc = &pmc_state[args.counter];
 	mutex_enter(&pmc_lock);
 	if (start && pmc->running) {
 		mutex_exit(&pmc_lock);
 		return EBUSY;
 	} else if (!start && !pmc->running) {
 		mutex_exit(&pmc_lock);
 		return 0;
+	}
 	if (start) {
 		pmc_start(pmc, &args);
 	} else {
 		pmc_stop(pmc, &args);
+	}
 	mutex_exit(&pmc_lock);
 	return 0;
+}
 int
 sys_pmc_read(struct lwp *l, struct x86_pmc_read_args *uargs, register_t *retval)
+{
 	struct x86_pmc_read_args args;
 	pmc_state_t *pmc;
 	size_t nval;
 	int error;
 	error = kauth_authorize_machdep(l->l_cred, KAUTH_MACHDEP_X86PMC,
 	    NULL, NULL, NULL, NULL);
 	if (error)
 		return error;
 	if (pmc_type == PMC_TYPE_NONE)
 		return ENODEV;
 	error = copyin(uargs, &args, sizeof(args));
 	if (error)
 		return error;
 	if (args.counter >= pmc_ncounters)
 		return EINVAL;
 	if (args.values == NULL)
 		return EINVAL;
 	nval = MIN(ncpu, args.nval);
 	pmc = &pmc_state[args.counter];
 	mutex_enter(&pmc_lock);
 	if (pmc->running) {
 		pmc_read(pmc);
 		error = copyout(&pmc_val_cpus, args.values,
 		    nval * sizeof(x86_pmc_cpuval_t));
 		args.nval = nval;
 	} else {
 		error = ENOENT;
+	}
 	mutex_exit(&pmc_lock);
 	if (error)
 		return error;
 	return copyout(&args, uargs, sizeof(args));
+}

 @@ -1,956 +1,957 @@
-/* $NetBSD: secmodel_suser.c,v 1.42 2015/08/17 06:16:03 knakahara Exp $ */
+/* $NetBSD: secmodel_suser.c,v 1.43 2017/06/14 17:48:41 maxv Exp $ */
 /*-
  * Copyright (c) 2006 Elad Efrat <elad@NetBSD.org>
  * All rights reserved.
+ *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
  *    documentation and/or other materials provided with the distribution.
  * 3. The name of the author may not be used to endorse or promote products
  *    derived from this software without specific prior written permission.
+ *
  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 /*
  * This file contains kauth(9) listeners needed to implement the traditional
  * NetBSD superuser access restrictions.
+ *
  * There are two main resources a request can be issued to: user-owned and
  * system owned. For the first, traditional Unix access checks are done, as
  * well as superuser checks. If needed, the request context is examined before
  * a decision is made. For the latter, usually only superuser checks are done
  * as normal users are not allowed to access system resources.
  */
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.42 2015/08/17 06:16:03 knakahara Exp $");
+__KERNEL_RCSID(0, "$NetBSD: secmodel_suser.c,v 1.43 2017/06/14 17:48:41 maxv Exp $");
 #include <sys/types.h>
 #include <sys/param.h>
 #include <sys/kauth.h>
 #include <sys/mutex.h>
 #include <sys/mount.h>
 #include <sys/socketvar.h>
 #include <sys/sysctl.h>
 #include <sys/vnode.h>
 #include <sys/proc.h>
 #include <sys/module.h>
 #include <secmodel/secmodel.h>
 #include <secmodel/suser/suser.h>
 MODULE(MODULE_CLASS_SECMODEL, suser, NULL);
 static kauth_listener_t l_generic, l_system, l_process, l_network, l_machdep,
     l_device, l_vnode;
 static secmodel_t suser_sm;
 static struct sysctllog *suser_sysctl_log;
 void
 sysctl_security_suser_setup(struct sysctllog **clog)
+{
 	const struct sysctlnode *rnode;
 	sysctl_createv(clog, 0, NULL, &rnode,
 		       CTLFLAG_PERMANENT,
 		       CTLTYPE_NODE, "models", NULL,
 		       NULL, 0, NULL, 0,
 		       CTL_SECURITY, CTL_CREATE, CTL_EOL);
 	sysctl_createv(clog, 0, &rnode, &rnode,
 		       CTLFLAG_PERMANENT,
 		       CTLTYPE_NODE, "suser", NULL,
 		       NULL, 0, NULL, 0,
 		       CTL_CREATE, CTL_EOL);
 	sysctl_createv(clog, 0, &rnode, NULL,
 		       CTLFLAG_PERMANENT,
 		       CTLTYPE_STRING, "name", NULL,
 		       NULL, 0, __UNCONST(SECMODEL_SUSER_NAME), 0,
 		       CTL_CREATE, CTL_EOL);
+}
 void
 secmodel_suser_init(void)
+{
+}
 void
 secmodel_suser_start(void)
+{
 	l_generic = kauth_listen_scope(KAUTH_SCOPE_GENERIC,
 	    secmodel_suser_generic_cb, NULL);
 	l_system = kauth_listen_scope(KAUTH_SCOPE_SYSTEM,
 	    secmodel_suser_system_cb, NULL);
 	l_process = kauth_listen_scope(KAUTH_SCOPE_PROCESS,
 	    secmodel_suser_process_cb, NULL);
 	l_network = kauth_listen_scope(KAUTH_SCOPE_NETWORK,
 	    secmodel_suser_network_cb, NULL);
 	l_machdep = kauth_listen_scope(KAUTH_SCOPE_MACHDEP,
 	    secmodel_suser_machdep_cb, NULL);
 	l_device = kauth_listen_scope(KAUTH_SCOPE_DEVICE,
 	    secmodel_suser_device_cb, NULL);
 	l_vnode = kauth_listen_scope(KAUTH_SCOPE_VNODE,
 	    secmodel_suser_vnode_cb, NULL);
+}
 void
 secmodel_suser_stop(void)
+{
 	kauth_unlisten_scope(l_generic);
 	kauth_unlisten_scope(l_system);
 	kauth_unlisten_scope(l_process);
 	kauth_unlisten_scope(l_network);
 	kauth_unlisten_scope(l_machdep);
 	kauth_unlisten_scope(l_device);
 	kauth_unlisten_scope(l_vnode);
+}
 static bool
 suser_isroot(kauth_cred_t cred)
+{
 	return kauth_cred_geteuid(cred) == 0;
+}
 static int
 suser_eval(const char *what, void *arg, void *ret)
+{
 	int error = 0;
 	if (strcasecmp(what, "is-root") == 0) {
 		kauth_cred_t cred = arg;
 		bool *bp = ret;
 		*bp = suser_isroot(cred);
 	} else {
 		error = ENOENT;
+	}
 	return error;
+}
 static int
 suser_modcmd(modcmd_t cmd, void *arg)
+{
 	int error = 0;
 	switch (cmd) {
 	case MODULE_CMD_INIT:
 		error = secmodel_register(&suser_sm,
 		    SECMODEL_SUSER_ID, SECMODEL_SUSER_NAME,
 		    NULL, suser_eval, NULL);
 		if (error != 0)
 			printf("suser_modcmd::init: secmodel_register "
 			    "returned %d\n", error);
 		secmodel_suser_init();
 		secmodel_suser_start();
 		sysctl_security_suser_setup(&suser_sysctl_log);
 		break;
 	case MODULE_CMD_FINI:
 		sysctl_teardown(&suser_sysctl_log);
 		secmodel_suser_stop();
 		error = secmodel_deregister(suser_sm);
 		if (error != 0)
 			printf("suser_modcmd::fini: secmodel_deregister "
 			    "returned %d\n", error);
 		break;
 	case MODULE_CMD_AUTOUNLOAD:
 		error = EPERM;
 		break;
 	default:
 		error = ENOTTY;
 		break;
+	}
 	return (error);
+}
 /*
  * kauth(9) listener
+ *
  * Security model: Traditional NetBSD
  * Scope: Generic
  * Responsibility: Superuser access
  */
 int
 secmodel_suser_generic_cb(kauth_cred_t cred, kauth_action_t action,
     void *cookie, void *arg0, void *arg1, void *arg2, void *arg3)
+{
 	bool isroot;
 	int result;
 	isroot = suser_isroot(cred);
 	result = KAUTH_RESULT_DEFER;
 	switch (action) {
 	case KAUTH_GENERIC_ISSUSER:
 		if (isroot)
 			result = KAUTH_RESULT_ALLOW;
 		break;
 	default:
 		break;
+	}
 	return (result);
+}
 /*
  * kauth(9) listener
+ *
  * Security model: Traditional NetBSD
  * Scope: System
  * Responsibility: Superuser access
  */
 int
 secmodel_suser_system_cb(kauth_cred_t cred, kauth_action_t action,
     void *cookie, void *arg0, void *arg1, void *arg2, void *arg3)
+{
 	bool isroot;
 	int result;
 	enum kauth_system_req req;
 	isroot = suser_isroot(cred);
 	result = KAUTH_RESULT_DEFER;
 	req = (enum kauth_system_req)arg0;
 	switch (action) {
 	case KAUTH_SYSTEM_CPU:
 		switch (req) {
 		case KAUTH_REQ_SYSTEM_CPU_SETSTATE:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_SYSTEM_DEVMAPPER:
 		if (isroot)
 			result = KAUTH_RESULT_ALLOW;
 		break;
 	case KAUTH_SYSTEM_FS_QUOTA:
 		switch (req) {
 		case KAUTH_REQ_SYSTEM_FS_QUOTA_GET:
 		case KAUTH_REQ_SYSTEM_FS_QUOTA_ONOFF:
 		case KAUTH_REQ_SYSTEM_FS_QUOTA_MANAGE:
 		case KAUTH_REQ_SYSTEM_FS_QUOTA_NOLIMIT:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_SYSTEM_SYSVIPC:
 		switch (req) {
 		case KAUTH_REQ_SYSTEM_SYSVIPC_BYPASS:
 		case KAUTH_REQ_SYSTEM_SYSVIPC_SHM_LOCK:
 		case KAUTH_REQ_SYSTEM_SYSVIPC_SHM_UNLOCK:
 		case KAUTH_REQ_SYSTEM_SYSVIPC_MSGQ_OVERSIZE:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_SYSTEM_MOUNT:
 		switch (req) {
 		case KAUTH_REQ_SYSTEM_MOUNT_DEVICE:
 		case KAUTH_REQ_SYSTEM_MOUNT_GET:
 		case KAUTH_REQ_SYSTEM_MOUNT_NEW:
 		case KAUTH_REQ_SYSTEM_MOUNT_UNMOUNT:
 		case KAUTH_REQ_SYSTEM_MOUNT_UPDATE:
 		case KAUTH_REQ_SYSTEM_MOUNT_UMAP:
 			if (isroot) {
 				result = KAUTH_RESULT_ALLOW;
 				break;
+			}
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_SYSTEM_MQUEUE:
 		if (isroot)
 			result = KAUTH_RESULT_ALLOW;
 		break;
 	case KAUTH_SYSTEM_PSET:
 		switch (req) {
 		case KAUTH_REQ_SYSTEM_PSET_ASSIGN:
 		case KAUTH_REQ_SYSTEM_PSET_BIND:
 		case KAUTH_REQ_SYSTEM_PSET_CREATE:
 		case KAUTH_REQ_SYSTEM_PSET_DESTROY:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_SYSTEM_TIME:
 		switch (req) {
 		case KAUTH_REQ_SYSTEM_TIME_ADJTIME:
 		case KAUTH_REQ_SYSTEM_TIME_NTPADJTIME:
 		case KAUTH_REQ_SYSTEM_TIME_TIMECOUNTERS:
 		case KAUTH_REQ_SYSTEM_TIME_SYSTEM:
 		case KAUTH_REQ_SYSTEM_TIME_RTCOFFSET:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_SYSTEM_SEMAPHORE:
 		if (isroot)
 			result = KAUTH_RESULT_ALLOW;
 		break;
 	case KAUTH_SYSTEM_SYSCTL:
 		switch (req) {
 		case KAUTH_REQ_SYSTEM_SYSCTL_ADD:
 		case KAUTH_REQ_SYSTEM_SYSCTL_DELETE:
 		case KAUTH_REQ_SYSTEM_SYSCTL_DESC:
 		case KAUTH_REQ_SYSTEM_SYSCTL_MODIFY:
 		case KAUTH_REQ_SYSTEM_SYSCTL_PRVT:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_SYSTEM_SWAPCTL:
 	case KAUTH_SYSTEM_ACCOUNTING:
 	case KAUTH_SYSTEM_REBOOT:
 	case KAUTH_SYSTEM_CHROOT:
 	case KAUTH_SYSTEM_FILEHANDLE:
 	case KAUTH_SYSTEM_MKNOD:
 	case KAUTH_SYSTEM_SETIDCORE:
 	case KAUTH_SYSTEM_MODULE:
 	case KAUTH_SYSTEM_FS_RESERVEDSPACE:
 	case KAUTH_SYSTEM_MAP_VA_ZERO:
 	case KAUTH_SYSTEM_FS_EXTATTR:
 	case KAUTH_SYSTEM_FS_SNAPSHOT:
 		if (isroot)
 			result = KAUTH_RESULT_ALLOW;
 		break;
 	case KAUTH_SYSTEM_DEBUG:
 		switch (req) {
 		case KAUTH_REQ_SYSTEM_DEBUG_IPKDB:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_SYSTEM_CHSYSFLAGS:
 		/* Deprecated. */
 		if (isroot)
 			result = KAUTH_RESULT_ALLOW;
 		break;
 	case KAUTH_SYSTEM_VERIEXEC:
 		switch (req) {
 		case KAUTH_REQ_SYSTEM_VERIEXEC_ACCESS:
 		case KAUTH_REQ_SYSTEM_VERIEXEC_MODIFY:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_SYSTEM_LFS:
 		switch (req) {
 		case KAUTH_REQ_SYSTEM_LFS_MARKV:
 		case KAUTH_REQ_SYSTEM_LFS_BMAPV:
 		case KAUTH_REQ_SYSTEM_LFS_SEGCLEAN:
 		case KAUTH_REQ_SYSTEM_LFS_SEGWAIT:
 		case KAUTH_REQ_SYSTEM_LFS_FCNTL:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_SYSTEM_INTR:
 		switch (req) {
 		case KAUTH_REQ_SYSTEM_INTR_AFFINITY:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	default:
 		break;
+	}
 	return (result);
+}
 /*
  * kauth(9) listener
+ *
  * Security model: Traditional NetBSD
  * Scope: Process
  * Responsibility: Superuser access
  */
 int
 secmodel_suser_process_cb(kauth_cred_t cred, kauth_action_t action,
     void *cookie, void *arg0, void *arg1, void *arg2, void *arg3)
+{
 	bool isroot;
 	int result;
 	isroot = suser_isroot(cred);
 	result = KAUTH_RESULT_DEFER;
 	switch (action) {
 	case KAUTH_PROCESS_SIGNAL:
 	case KAUTH_PROCESS_KTRACE:
 	case KAUTH_PROCESS_PROCFS:
 	case KAUTH_PROCESS_PTRACE:
 	case KAUTH_PROCESS_SCHEDULER_GETPARAM:
 	case KAUTH_PROCESS_SCHEDULER_SETPARAM:
 	case KAUTH_PROCESS_SCHEDULER_GETAFFINITY:
 	case KAUTH_PROCESS_SCHEDULER_SETAFFINITY:
 	case KAUTH_PROCESS_SETID:
 	case KAUTH_PROCESS_KEVENT_FILTER:
 	case KAUTH_PROCESS_NICE:
 	case KAUTH_PROCESS_FORK:
 	case KAUTH_PROCESS_CORENAME:
 	case KAUTH_PROCESS_STOPFLAG:
 		if (isroot)
 			result = KAUTH_RESULT_ALLOW;
 		break;
 	case KAUTH_PROCESS_CANSEE: {
 		unsigned long req;
 		req = (unsigned long)arg1;
 		switch (req) {
 		case KAUTH_REQ_PROCESS_CANSEE_ARGS:
 		case KAUTH_REQ_PROCESS_CANSEE_ENTRY:
 		case KAUTH_REQ_PROCESS_CANSEE_OPENFILES:
 			if (isroot) {
 				result = KAUTH_RESULT_ALLOW;
 				break;
+			}
 			break;
 		case KAUTH_REQ_PROCESS_CANSEE_ENV:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
+		}
 	case KAUTH_PROCESS_RLIMIT: {
 		enum kauth_process_req req;
 		req = (enum kauth_process_req)(unsigned long)arg1;
 		switch (req) {
 		case KAUTH_REQ_PROCESS_RLIMIT_SET:
 		case KAUTH_REQ_PROCESS_RLIMIT_GET:
 		case KAUTH_REQ_PROCESS_RLIMIT_BYPASS:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
+		}
 	default:
 		break;
+	}
 	return (result);
+}
 /*
  * kauth(9) listener
+ *
  * Security model: Traditional NetBSD
  * Scope: Network
  * Responsibility: Superuser access
  */
 int
 secmodel_suser_network_cb(kauth_cred_t cred, kauth_action_t action,
     void *cookie, void *arg0, void *arg1, void *arg2, void *arg3)
+{
 	bool isroot;
 	int result;
 	enum kauth_network_req req;
 	isroot = suser_isroot(cred);
 	result = KAUTH_RESULT_DEFER;
 	req = (enum kauth_network_req)arg0;
 	switch (action) {
 	case KAUTH_NETWORK_ALTQ:
 		switch (req) {
 		case KAUTH_REQ_NETWORK_ALTQ_AFMAP:
 		case KAUTH_REQ_NETWORK_ALTQ_BLUE:
 		case KAUTH_REQ_NETWORK_ALTQ_CBQ:
 		case KAUTH_REQ_NETWORK_ALTQ_CDNR:
 		case KAUTH_REQ_NETWORK_ALTQ_CONF:
 		case KAUTH_REQ_NETWORK_ALTQ_FIFOQ:
 		case KAUTH_REQ_NETWORK_ALTQ_HFSC:
 		case KAUTH_REQ_NETWORK_ALTQ_JOBS:
 		case KAUTH_REQ_NETWORK_ALTQ_PRIQ:
 		case KAUTH_REQ_NETWORK_ALTQ_RED:
 		case KAUTH_REQ_NETWORK_ALTQ_RIO:
 		case KAUTH_REQ_NETWORK_ALTQ_WFQ:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_NETWORK_BIND:
 		switch (req) {
 		case KAUTH_REQ_NETWORK_BIND_PORT:
 		case KAUTH_REQ_NETWORK_BIND_PRIVPORT:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_NETWORK_FIREWALL:
 		switch (req) {
 		case KAUTH_REQ_NETWORK_FIREWALL_FW:
 		case KAUTH_REQ_NETWORK_FIREWALL_NAT:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_NETWORK_FORWSRCRT:
 	case KAUTH_NETWORK_ROUTE:
 		if (isroot)
 			result = KAUTH_RESULT_ALLOW;
 		break;
 	case KAUTH_NETWORK_INTERFACE:
 		switch (req) {
 		case KAUTH_REQ_NETWORK_INTERFACE_GET:
 		case KAUTH_REQ_NETWORK_INTERFACE_SET:
 		case KAUTH_REQ_NETWORK_INTERFACE_GETPRIV:
 		case KAUTH_REQ_NETWORK_INTERFACE_SETPRIV:
 		case KAUTH_REQ_NETWORK_INTERFACE_FIRMWARE:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_NETWORK_INTERFACE_BRIDGE:
 		switch (req) {
 		case KAUTH_REQ_NETWORK_INTERFACE_BRIDGE_GETPRIV:
 		case KAUTH_REQ_NETWORK_INTERFACE_BRIDGE_SETPRIV:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_NETWORK_INTERFACE_PPP:
 		switch (req) {
 		case KAUTH_REQ_NETWORK_INTERFACE_PPP_ADD:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_NETWORK_INTERFACE_PVC:
 		switch (req) {
 		case KAUTH_REQ_NETWORK_INTERFACE_PVC_ADD:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_NETWORK_INTERFACE_SLIP:
 		switch (req) {
 		case KAUTH_REQ_NETWORK_INTERFACE_SLIP_ADD:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_NETWORK_INTERFACE_STRIP:
 		switch (req) {
 		case KAUTH_REQ_NETWORK_INTERFACE_STRIP_ADD:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_NETWORK_INTERFACE_TUN:
 		switch (req) {
 		case KAUTH_REQ_NETWORK_INTERFACE_TUN_ADD:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_NETWORK_IPV6:
 		switch (req) {
 		case KAUTH_REQ_NETWORK_IPV6_HOPBYHOP:
 		case KAUTH_REQ_NETWORK_IPV6_JOIN_MULTICAST:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_NETWORK_NFS:
 		switch (req) {
 		case KAUTH_REQ_NETWORK_NFS_EXPORT:
 		case KAUTH_REQ_NETWORK_NFS_SVC:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_NETWORK_SMB:
 		switch (req) {
 		case KAUTH_REQ_NETWORK_SMB_SHARE_ACCESS:
 		case KAUTH_REQ_NETWORK_SMB_SHARE_CREATE:
 		case KAUTH_REQ_NETWORK_SMB_VC_ACCESS:
 		case KAUTH_REQ_NETWORK_SMB_VC_CREATE:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_NETWORK_SOCKET:
 		switch (req) {
 		case KAUTH_REQ_NETWORK_SOCKET_DROP:
 		case KAUTH_REQ_NETWORK_SOCKET_OPEN:
 		case KAUTH_REQ_NETWORK_SOCKET_RAWSOCK:
 		case KAUTH_REQ_NETWORK_SOCKET_SETPRIV:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		case KAUTH_REQ_NETWORK_SOCKET_CANSEE:
 			if (isroot) {
 				result = KAUTH_RESULT_ALLOW;
 				break;
+			}
 			break;
 		default:
 			break;
+		}
 		break;
 	case KAUTH_NETWORK_IPSEC:
 		switch (req) {
 		case KAUTH_REQ_NETWORK_IPSEC_BYPASS:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
 	default:
 		break;
+	}
 	return (result);
+}
 /*
  * kauth(9) listener
+ *
  * Security model: Traditional NetBSD
  * Scope: Machdep
  * Responsibility: Superuser access
  */
 int
 secmodel_suser_machdep_cb(kauth_cred_t cred, kauth_action_t action,
     void *cookie, void *arg0, void *arg1, void *arg2, void *arg3)
+{
-        bool isroot;
+	bool isroot;
-        int result;
+	int result;
-        isroot = suser_isroot(cred);
+	isroot = suser_isroot(cred);
-        result = KAUTH_RESULT_DEFER;
+	result = KAUTH_RESULT_DEFER;
-        switch (action) {
+	switch (action) {
 	case KAUTH_MACHDEP_CPU_UCODE_APPLY:
 	case KAUTH_MACHDEP_IOPERM_GET:
 	case KAUTH_MACHDEP_LDT_GET:
 	case KAUTH_MACHDEP_LDT_SET:
 	case KAUTH_MACHDEP_MTRR_GET:
 	case KAUTH_MACHDEP_CACHEFLUSH:
 	case KAUTH_MACHDEP_IOPERM_SET:
 	case KAUTH_MACHDEP_IOPL:
 	case KAUTH_MACHDEP_MTRR_SET:
 	case KAUTH_MACHDEP_NVRAM:
 	case KAUTH_MACHDEP_UNMANAGEDMEM:
 	case KAUTH_MACHDEP_PXG:
 	case KAUTH_MACHDEP_X86PMC:
 		if (isroot)
 			result = KAUTH_RESULT_ALLOW;
 		break;
 	default:
 		break;
+	}
 	return (result);
+}
 /*
  * kauth(9) listener
+ *
  * Security model: Traditional NetBSD
  * Scope: Device
  * Responsibility: Superuser access
  */
 int
 secmodel_suser_device_cb(kauth_cred_t cred, kauth_action_t action,
     void *cookie, void *arg0, void *arg1, void *arg2, void *arg3)
+{
-        bool isroot;
+	bool isroot;
-        int result;
+	int result;
-        isroot = suser_isroot(cred);
+	isroot = suser_isroot(cred);
-        result = KAUTH_RESULT_DEFER;
+	result = KAUTH_RESULT_DEFER;
 	switch (action) {
 	case KAUTH_DEVICE_BLUETOOTH_SETPRIV:
 	case KAUTH_DEVICE_BLUETOOTH_SEND:
 	case KAUTH_DEVICE_BLUETOOTH_RECV:
 	case KAUTH_DEVICE_TTY_OPEN:
 	case KAUTH_DEVICE_TTY_PRIVSET:
 	case KAUTH_DEVICE_TTY_STI:
 	case KAUTH_DEVICE_TTY_VIRTUAL:
 	case KAUTH_DEVICE_RND_ADDDATA:
 	case KAUTH_DEVICE_RND_ADDDATA_ESTIMATE:
 	case KAUTH_DEVICE_RND_GETPRIV:
 	case KAUTH_DEVICE_RND_SETPRIV:
 	case KAUTH_DEVICE_WSCONS_KEYBOARD_BELL:
 	case KAUTH_DEVICE_WSCONS_KEYBOARD_KEYREPEAT:
 		if (isroot)
 			result = KAUTH_RESULT_ALLOW;
 		break;
 	case KAUTH_DEVICE_BLUETOOTH_BCSP:
 	case KAUTH_DEVICE_BLUETOOTH_BTUART: {
 		enum kauth_device_req req;
 		req = (enum kauth_device_req)arg0;
 		switch (req) {
 		case KAUTH_REQ_DEVICE_BLUETOOTH_BCSP_ADD:
 		case KAUTH_REQ_DEVICE_BLUETOOTH_BTUART_ADD:
 			if (isroot)
 				result = KAUTH_RESULT_ALLOW;
 			break;
 		default:
 			break;
+		}
 		break;
+		}
 	case KAUTH_DEVICE_GPIO_PINSET:
 		/*
 		 * root can access gpio pins, secmodel_securlevel can veto
 		 * this decision.
 		 */
 		if (isroot)
 			result = KAUTH_RESULT_ALLOW;
 		break;
 	default:
 		break;
+	}
 	return (result);
+}
 int
 secmodel_suser_vnode_cb(kauth_cred_t cred, kauth_action_t action,
     void *cookie, void *arg0, void *arg1, void *arg2, void *arg3)
+{
 	bool isroot;
 	int result;
 	isroot = suser_isroot(cred);
 	result = KAUTH_RESULT_DEFER;
 	if (isroot) {
 		/* Superuser can execute only if the file's executable. */
 		if ((action & KAUTH_VNODE_EXECUTE) == 0 ||
 		    (action & KAUTH_VNODE_IS_EXEC))
 			result = KAUTH_RESULT_ALLOW;
+	}
 	return (result);
+}

 @@ -1,530 +1,531 @@
-/* $NetBSD: kauth.h,v 1.73 2015/10/06 22:13:39 christos Exp $ */
+/* $NetBSD: kauth.h,v 1.74 2017/06/14 17:48:41 maxv Exp $ */
 /*-
  * Copyright (c) 2005, 2006 Elad Efrat <elad@NetBSD.org>
  * All rights reserved.
+ *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
  *    documentation and/or other materials provided with the distribution.
  * 3. The name of the author may not be used to endorse or promote products
  *    derived from this software without specific prior written permission.
+ *
  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 /*
  * This is based on Apple TN2127, available online at
  * http://developer.apple.com/technotes/tn2005/tn2127.html
  */
 #ifndef _SYS_KAUTH_H_
 #define	_SYS_KAUTH_H_
 #include <secmodel/secmodel.h> /* for secmodel_t type */
 #include <sys/stat.h> /* for modes */
 struct uucred;
 struct ki_ucred;
 struct ki_pcred;
 struct proc;
 struct tty;
 struct vnode;
 struct cwdinfo;
 /* Types. */
 typedef struct kauth_scope     *kauth_scope_t;
 typedef struct kauth_listener  *kauth_listener_t;
 typedef uint32_t		kauth_action_t;
 typedef int (*kauth_scope_callback_t)(kauth_cred_t, kauth_action_t,
 				      void *, void *, void *, void *, void *);
 typedef	struct kauth_key       *kauth_key_t;
 #ifdef __KAUTH_PRIVATE	/* For the debugger */
 /*
  * Credentials.
+ *
  * A subset of this structure is used in kvm(3) (src/lib/libkvm/kvm_proc.c)
  * and should be synchronized with this structure when the update is
  * relevant.
  */
 struct kauth_cred {
 	/*
 	 * Ensure that the first part of the credential resides in its own
 	 * cache line.  Due to sharing there aren't many kauth_creds in a
 	 * typical system, but the reference counts change very often.
 	 * Keeping it separate from the rest of the data prevents false
 	 * sharing between CPUs.
 	 */
 	u_int cr_refcnt;		/* reference count */
 #if COHERENCY_UNIT > 4
 	uint8_t cr_pad[COHERENCY_UNIT - 4];
 #endif
 	uid_t cr_uid;			/* user id */
 	uid_t cr_euid;			/* effective user id */
 	uid_t cr_svuid;			/* saved effective user id */
 	gid_t cr_gid;			/* group id */
 	gid_t cr_egid;			/* effective group id */
 	gid_t cr_svgid;			/* saved effective group id */
 	u_int cr_ngroups;		/* number of groups */
 	gid_t cr_groups[NGROUPS];	/* group memberships */
 	specificdata_reference cr_sd;	/* specific data */
 };
 #endif
 /*
  * Possible return values for a listener.
  */
 #define	KAUTH_RESULT_ALLOW	0	/* allow access */
 #define	KAUTH_RESULT_DENY	1	/* deny access */
 #define	KAUTH_RESULT_DEFER	2	/* let others decide */
 /*
  * Scopes.
  */
 #define	KAUTH_SCOPE_GENERIC	"org.netbsd.kauth.generic"
 #define	KAUTH_SCOPE_SYSTEM	"org.netbsd.kauth.system"
 #define	KAUTH_SCOPE_PROCESS	"org.netbsd.kauth.process"
 #define	KAUTH_SCOPE_NETWORK	"org.netbsd.kauth.network"
 #define	KAUTH_SCOPE_MACHDEP	"org.netbsd.kauth.machdep"
 #define	KAUTH_SCOPE_DEVICE	"org.netbsd.kauth.device"
 #define	KAUTH_SCOPE_CRED	"org.netbsd.kauth.cred"
 #define	KAUTH_SCOPE_VNODE	"org.netbsd.kauth.vnode"
 /*
  * Generic scope - actions.
  */
 enum {
 	KAUTH_GENERIC_UNUSED1=1,
 	KAUTH_GENERIC_ISSUSER,
 };
 /*
  * System scope - actions.
  */
 enum {
 	KAUTH_SYSTEM_ACCOUNTING=1,
 	KAUTH_SYSTEM_CHROOT,
 	KAUTH_SYSTEM_CHSYSFLAGS,
 	KAUTH_SYSTEM_CPU,
 	KAUTH_SYSTEM_DEBUG,
 	KAUTH_SYSTEM_FILEHANDLE,
 	KAUTH_SYSTEM_MKNOD,
 	KAUTH_SYSTEM_MOUNT,
 	KAUTH_SYSTEM_PSET,
 	KAUTH_SYSTEM_REBOOT,
 	KAUTH_SYSTEM_SETIDCORE,
 	KAUTH_SYSTEM_SWAPCTL,
 	KAUTH_SYSTEM_SYSCTL,
 	KAUTH_SYSTEM_TIME,
 	KAUTH_SYSTEM_MODULE,
 	KAUTH_SYSTEM_FS_RESERVEDSPACE,
 	KAUTH_SYSTEM_FS_QUOTA,
 	KAUTH_SYSTEM_SEMAPHORE,
 	KAUTH_SYSTEM_SYSVIPC,
 	KAUTH_SYSTEM_MQUEUE,
 	KAUTH_SYSTEM_VERIEXEC,
 	KAUTH_SYSTEM_DEVMAPPER,
 	KAUTH_SYSTEM_MAP_VA_ZERO,
 	KAUTH_SYSTEM_LFS,
 	KAUTH_SYSTEM_FS_EXTATTR,
 	KAUTH_SYSTEM_FS_SNAPSHOT,
 	KAUTH_SYSTEM_INTR,
 };
 /*
  * System scope - sub-actions.
  */
 enum kauth_system_req {
 	KAUTH_REQ_SYSTEM_CHROOT_CHROOT=1,
 	KAUTH_REQ_SYSTEM_CHROOT_FCHROOT,
 	KAUTH_REQ_SYSTEM_CPU_SETSTATE,
 	KAUTH_REQ_SYSTEM_DEBUG_IPKDB,
 	KAUTH_REQ_SYSTEM_MOUNT_GET,
 	KAUTH_REQ_SYSTEM_MOUNT_NEW,
 	KAUTH_REQ_SYSTEM_MOUNT_UNMOUNT,
 	KAUTH_REQ_SYSTEM_MOUNT_UPDATE,
 	KAUTH_REQ_SYSTEM_PSET_ASSIGN,
 	KAUTH_REQ_SYSTEM_PSET_BIND,
 	KAUTH_REQ_SYSTEM_PSET_CREATE,
 	KAUTH_REQ_SYSTEM_PSET_DESTROY,
 	KAUTH_REQ_SYSTEM_SYSCTL_ADD,
 	KAUTH_REQ_SYSTEM_SYSCTL_DELETE,
 	KAUTH_REQ_SYSTEM_SYSCTL_DESC,
 	KAUTH_REQ_SYSTEM_SYSCTL_MODIFY,
 	KAUTH_REQ_SYSTEM_SYSCTL_PRVT,
 	KAUTH_REQ_SYSTEM_TIME_ADJTIME,
 	KAUTH_REQ_SYSTEM_TIME_NTPADJTIME,
 	KAUTH_REQ_SYSTEM_TIME_RTCOFFSET,
 	KAUTH_REQ_SYSTEM_TIME_SYSTEM,
 	KAUTH_REQ_SYSTEM_TIME_TIMECOUNTERS,
 	KAUTH_REQ_SYSTEM_FS_QUOTA_GET,
 	KAUTH_REQ_SYSTEM_FS_QUOTA_MANAGE,
 	KAUTH_REQ_SYSTEM_FS_QUOTA_NOLIMIT,
 	KAUTH_REQ_SYSTEM_FS_QUOTA_ONOFF,
 	KAUTH_REQ_SYSTEM_SYSVIPC_BYPASS,
 	KAUTH_REQ_SYSTEM_SYSVIPC_SHM_LOCK,
 	KAUTH_REQ_SYSTEM_SYSVIPC_SHM_UNLOCK,
 	KAUTH_REQ_SYSTEM_SYSVIPC_MSGQ_OVERSIZE,
 	KAUTH_REQ_SYSTEM_VERIEXEC_ACCESS,
 	KAUTH_REQ_SYSTEM_VERIEXEC_MODIFY,
 	KAUTH_REQ_SYSTEM_LFS_MARKV,
 	KAUTH_REQ_SYSTEM_LFS_BMAPV,
 	KAUTH_REQ_SYSTEM_LFS_SEGCLEAN,
 	KAUTH_REQ_SYSTEM_LFS_SEGWAIT,
 	KAUTH_REQ_SYSTEM_LFS_FCNTL,
 	KAUTH_REQ_SYSTEM_MOUNT_UMAP,
 	KAUTH_REQ_SYSTEM_MOUNT_DEVICE,
 	KAUTH_REQ_SYSTEM_INTR_AFFINITY,
 };
 /*
  * Process scope - actions.
  */
 enum {
 	KAUTH_PROCESS_CANSEE=1,
 	KAUTH_PROCESS_CORENAME,
 	KAUTH_PROCESS_FORK,
 	KAUTH_PROCESS_KEVENT_FILTER,
 	KAUTH_PROCESS_KTRACE,
 	KAUTH_PROCESS_NICE,
 	KAUTH_PROCESS_PROCFS,
 	KAUTH_PROCESS_PTRACE,
 	KAUTH_PROCESS_RLIMIT,
 	KAUTH_PROCESS_SCHEDULER_GETAFFINITY,
 	KAUTH_PROCESS_SCHEDULER_SETAFFINITY,
 	KAUTH_PROCESS_SCHEDULER_GETPARAM,
 	KAUTH_PROCESS_SCHEDULER_SETPARAM,
 	KAUTH_PROCESS_SETID,
 	KAUTH_PROCESS_SIGNAL,
 	KAUTH_PROCESS_STOPFLAG
 };
 /*
  * Process scope - sub-actions.
  */
 enum kauth_process_req {
 	KAUTH_REQ_PROCESS_CANSEE_ARGS=1,
 	KAUTH_REQ_PROCESS_CANSEE_ENTRY,
 	KAUTH_REQ_PROCESS_CANSEE_ENV,
 	KAUTH_REQ_PROCESS_CANSEE_OPENFILES,
 	KAUTH_REQ_PROCESS_CORENAME_GET,
 	KAUTH_REQ_PROCESS_CORENAME_SET,
 	KAUTH_REQ_PROCESS_KTRACE_PERSISTENT,
 	KAUTH_REQ_PROCESS_PROCFS_CTL,
 	KAUTH_REQ_PROCESS_PROCFS_READ,
 	KAUTH_REQ_PROCESS_PROCFS_RW,
 	KAUTH_REQ_PROCESS_PROCFS_WRITE,
 	KAUTH_REQ_PROCESS_RLIMIT_GET,
 	KAUTH_REQ_PROCESS_RLIMIT_SET,
 	KAUTH_REQ_PROCESS_RLIMIT_BYPASS,
 };
 /*
  * Network scope - actions.
  */
 enum {
 	KAUTH_NETWORK_ALTQ=1,
 	KAUTH_NETWORK_BIND,
 	KAUTH_NETWORK_FIREWALL,
 	KAUTH_NETWORK_INTERFACE,
 	KAUTH_NETWORK_FORWSRCRT,
 	KAUTH_NETWORK_NFS,
 	KAUTH_NETWORK_ROUTE,
 	KAUTH_NETWORK_SOCKET,
 	KAUTH_NETWORK_INTERFACE_PPP,
 	KAUTH_NETWORK_INTERFACE_SLIP,
 	KAUTH_NETWORK_INTERFACE_STRIP,
 	KAUTH_NETWORK_INTERFACE_TUN,
 	KAUTH_NETWORK_INTERFACE_BRIDGE,
 	KAUTH_NETWORK_IPSEC,
 	KAUTH_NETWORK_INTERFACE_PVC,
 	KAUTH_NETWORK_IPV6,
 	KAUTH_NETWORK_SMB,
 };
 /*
  * Network scope - sub-actions.
  */
 enum kauth_network_req {
 	KAUTH_REQ_NETWORK_ALTQ_AFMAP=1,
 	KAUTH_REQ_NETWORK_ALTQ_BLUE,
 	KAUTH_REQ_NETWORK_ALTQ_CBQ,
 	KAUTH_REQ_NETWORK_ALTQ_CDNR,
 	KAUTH_REQ_NETWORK_ALTQ_CONF,
 	KAUTH_REQ_NETWORK_ALTQ_FIFOQ,
 	KAUTH_REQ_NETWORK_ALTQ_HFSC,
 	KAUTH_REQ_NETWORK_ALTQ_JOBS,
 	KAUTH_REQ_NETWORK_ALTQ_PRIQ,
 	KAUTH_REQ_NETWORK_ALTQ_RED,
 	KAUTH_REQ_NETWORK_ALTQ_RIO,
 	KAUTH_REQ_NETWORK_ALTQ_WFQ,
 	KAUTH_REQ_NETWORK_BIND_PORT,
 	KAUTH_REQ_NETWORK_BIND_PRIVPORT,
 	KAUTH_REQ_NETWORK_FIREWALL_FW,
 	KAUTH_REQ_NETWORK_FIREWALL_NAT,
 	KAUTH_REQ_NETWORK_INTERFACE_GET,
 	KAUTH_REQ_NETWORK_INTERFACE_GETPRIV,
 	KAUTH_REQ_NETWORK_INTERFACE_SET,
 	KAUTH_REQ_NETWORK_INTERFACE_SETPRIV,
 	KAUTH_REQ_NETWORK_NFS_EXPORT,
 	KAUTH_REQ_NETWORK_NFS_SVC,
 	KAUTH_REQ_NETWORK_SOCKET_OPEN,
 	KAUTH_REQ_NETWORK_SOCKET_RAWSOCK,
 	KAUTH_REQ_NETWORK_SOCKET_CANSEE,
 	KAUTH_REQ_NETWORK_SOCKET_DROP,
 	KAUTH_REQ_NETWORK_SOCKET_SETPRIV,
 	KAUTH_REQ_NETWORK_INTERFACE_PPP_ADD,
 	KAUTH_REQ_NETWORK_INTERFACE_SLIP_ADD,
 	KAUTH_REQ_NETWORK_INTERFACE_STRIP_ADD,
 	KAUTH_REQ_NETWORK_INTERFACE_TUN_ADD,
 	KAUTH_REQ_NETWORK_IPV6_HOPBYHOP,
 	KAUTH_REQ_NETWORK_INTERFACE_BRIDGE_GETPRIV,
 	KAUTH_REQ_NETWORK_INTERFACE_BRIDGE_SETPRIV,
 	KAUTH_REQ_NETWORK_IPSEC_BYPASS,
 	KAUTH_REQ_NETWORK_IPV6_JOIN_MULTICAST,
 	KAUTH_REQ_NETWORK_INTERFACE_PVC_ADD,
 	KAUTH_REQ_NETWORK_SMB_SHARE_ACCESS,
 	KAUTH_REQ_NETWORK_SMB_SHARE_CREATE,
 	KAUTH_REQ_NETWORK_SMB_VC_ACCESS,
 	KAUTH_REQ_NETWORK_SMB_VC_CREATE,
 	KAUTH_REQ_NETWORK_INTERFACE_FIRMWARE,
 };
 /*
  * Machdep scope - actions.
  */
 enum {
 	KAUTH_MACHDEP_CACHEFLUSH=1,
 	KAUTH_MACHDEP_CPU_UCODE_APPLY,
 	KAUTH_MACHDEP_IOPERM_GET,
 	KAUTH_MACHDEP_IOPERM_SET,
 	KAUTH_MACHDEP_IOPL,
 	KAUTH_MACHDEP_LDT_GET,
 	KAUTH_MACHDEP_LDT_SET,
 	KAUTH_MACHDEP_MTRR_GET,
 	KAUTH_MACHDEP_MTRR_SET,
 	KAUTH_MACHDEP_NVRAM,
 	KAUTH_MACHDEP_UNMANAGEDMEM,
 	KAUTH_MACHDEP_PXG,
 	KAUTH_MACHDEP_X86PMC
 };
 /*
  * Device scope - actions.
  */
 enum {
 	KAUTH_DEVICE_TTY_OPEN=1,
 	KAUTH_DEVICE_TTY_PRIVSET,
 	KAUTH_DEVICE_TTY_STI,
 	KAUTH_DEVICE_RAWIO_SPEC,
 	KAUTH_DEVICE_RAWIO_PASSTHRU,
 	KAUTH_DEVICE_BLUETOOTH_SETPRIV,
 	KAUTH_DEVICE_RND_ADDDATA,
 	KAUTH_DEVICE_RND_ADDDATA_ESTIMATE,
 	KAUTH_DEVICE_RND_GETPRIV,
 	KAUTH_DEVICE_RND_SETPRIV,
 	KAUTH_DEVICE_BLUETOOTH_BCSP,
 	KAUTH_DEVICE_BLUETOOTH_BTUART,
 	KAUTH_DEVICE_GPIO_PINSET,
 	KAUTH_DEVICE_BLUETOOTH_SEND,
 	KAUTH_DEVICE_BLUETOOTH_RECV,
 	KAUTH_DEVICE_TTY_VIRTUAL,
 	KAUTH_DEVICE_WSCONS_KEYBOARD_BELL,
 	KAUTH_DEVICE_WSCONS_KEYBOARD_KEYREPEAT,
 };
 /*
  * Device scope - sub-actions.
  */
 enum kauth_device_req {
 	KAUTH_REQ_DEVICE_RAWIO_SPEC_READ=1,
 	KAUTH_REQ_DEVICE_RAWIO_SPEC_WRITE,
 	KAUTH_REQ_DEVICE_RAWIO_SPEC_RW,
 	KAUTH_REQ_DEVICE_BLUETOOTH_BCSP_ADD,
 	KAUTH_REQ_DEVICE_BLUETOOTH_BTUART_ADD,
 };
 /*
  * Credentials scope - actions.
  */
 enum {
 	KAUTH_CRED_INIT=1,
 	KAUTH_CRED_FORK,
 	KAUTH_CRED_COPY,
 	KAUTH_CRED_FREE,
 	KAUTH_CRED_CHROOT
 };
 /*
  * Vnode scope - action bits.
  */
 #define	KAUTH_VNODE_READ_DATA		(1U << 0)
 #define	KAUTH_VNODE_LIST_DIRECTORY	KAUTH_VNODE_READ_DATA
 #define	KAUTH_VNODE_WRITE_DATA		(1U << 1)
 #define	KAUTH_VNODE_ADD_FILE		KAUTH_VNODE_WRITE_DATA
 #define	KAUTH_VNODE_EXECUTE		(1U << 2)
 #define	KAUTH_VNODE_SEARCH		KAUTH_VNODE_EXECUTE
 #define	KAUTH_VNODE_DELETE		(1U << 3)
 #define	KAUTH_VNODE_APPEND_DATA		(1U << 4)
 #define	KAUTH_VNODE_ADD_SUBDIRECTORY	KAUTH_VNODE_APPEND_DATA
 #define	KAUTH_VNODE_READ_TIMES		(1U << 5)
 #define	KAUTH_VNODE_WRITE_TIMES		(1U << 6)
 #define	KAUTH_VNODE_READ_FLAGS		(1U << 7)
 #define	KAUTH_VNODE_WRITE_FLAGS		(1U << 8)
 #define	KAUTH_VNODE_READ_SYSFLAGS	(1U << 9)
 #define	KAUTH_VNODE_WRITE_SYSFLAGS	(1U << 10)
 #define	KAUTH_VNODE_RENAME		(1U << 11)
 #define	KAUTH_VNODE_CHANGE_OWNERSHIP	(1U << 12)
 #define	KAUTH_VNODE_READ_SECURITY	(1U << 13)
 #define	KAUTH_VNODE_WRITE_SECURITY	(1U << 14)
 #define	KAUTH_VNODE_READ_ATTRIBUTES	(1U << 15)
 #define	KAUTH_VNODE_WRITE_ATTRIBUTES	(1U << 16)
 #define	KAUTH_VNODE_READ_EXTATTRIBUTES	(1U << 17)
 #define	KAUTH_VNODE_WRITE_EXTATTRIBUTES	(1U << 18)
 #define	KAUTH_VNODE_RETAIN_SUID		(1U << 19)
 #define	KAUTH_VNODE_RETAIN_SGID		(1U << 20)
 #define	KAUTH_VNODE_REVOKE		(1U << 21)
 #define	KAUTH_VNODE_IS_EXEC		(1U << 29)
 #define	KAUTH_VNODE_HAS_SYSFLAGS	(1U << 30)
 #define	KAUTH_VNODE_ACCESS		(1U << 31)
 /*
  * This is a special fs_decision indication that can be used by file-systems
  * that don't support decision-before-action to tell kauth(9) it can only
  * short-circuit the operation beforehand.
  */
 #define	KAUTH_VNODE_REMOTEFS		(-1)
 /*
  * Device scope, passthru request - identifiers.
  */
 #define	KAUTH_REQ_DEVICE_RAWIO_PASSTHRU_READ		0x00000001
 #define	KAUTH_REQ_DEVICE_RAWIO_PASSTHRU_WRITE		0x00000002
 #define	KAUTH_REQ_DEVICE_RAWIO_PASSTHRU_READCONF	0x00000004
 #define	KAUTH_REQ_DEVICE_RAWIO_PASSTHRU_WRITECONF	0x00000008
 #define	KAUTH_REQ_DEVICE_RAWIO_PASSTHRU_ALL		0x0000000F
 #define NOCRED ((kauth_cred_t)-1)	/* no credential available */
 #define FSCRED ((kauth_cred_t)-2)	/* filesystem credential */
 /* Macro to help passing arguments to authorization wrappers. */
 #define	KAUTH_ARG(arg)	((void *)(unsigned long)(arg))
 /*
  * A file-system object is determined to be able to execute if it's a
  * directory or if the execute bit is present in any of the
  * owner/group/other modes.
+ *
  * This helper macro is intended to be used in order to implement a
  * policy that maintains the semantics of "a privileged user can enter
  * directory, and can execute any file, but only if the file is actually
  * executable."
  */
 #define	FS_OBJECT_CAN_EXEC(vtype, mode)	(((vtype) == VDIR) ||		\
 					 ((mode) &			\
 					  (S_IXUSR|S_IXGRP|S_IXOTH)))
 /*
  * Prototypes.
  */
 void kauth_init(void);
 kauth_scope_t kauth_register_scope(const char *, kauth_scope_callback_t, void *);
 void kauth_deregister_scope(kauth_scope_t);
 kauth_listener_t kauth_listen_scope(const char *, kauth_scope_callback_t, void *);
 void kauth_unlisten_scope(kauth_listener_t);
 int kauth_authorize_action(kauth_scope_t, kauth_cred_t, kauth_action_t, void *,
     void *, void *, void *);
 /* Authorization wrappers. */
 int kauth_authorize_generic(kauth_cred_t, kauth_action_t, void *);
 int kauth_authorize_system(kauth_cred_t, kauth_action_t, enum kauth_system_req,
     void *, void *, void *);
 int kauth_authorize_process(kauth_cred_t, kauth_action_t, struct proc *,
     void *, void *, void *);
 int kauth_authorize_network(kauth_cred_t, kauth_action_t,
     enum kauth_network_req, void *, void *, void *);
 int kauth_authorize_machdep(kauth_cred_t, kauth_action_t,
     void *, void *, void *, void *);
 int kauth_authorize_device(kauth_cred_t, kauth_action_t,
     void *, void *, void *, void *);
 int kauth_authorize_device_tty(kauth_cred_t, kauth_action_t, struct tty *);
 int kauth_authorize_device_spec(kauth_cred_t, enum kauth_device_req,
     struct vnode *);
 int kauth_authorize_device_passthru(kauth_cred_t, dev_t, u_long, void *);
 int kauth_authorize_vnode(kauth_cred_t, kauth_action_t, struct vnode *,
     struct vnode *, int);
 /* Kauth credentials management routines. */
 kauth_cred_t kauth_cred_alloc(void);
 void kauth_cred_free(kauth_cred_t);
 void kauth_cred_clone(kauth_cred_t, kauth_cred_t);
 kauth_cred_t kauth_cred_dup(kauth_cred_t);
 kauth_cred_t kauth_cred_copy(kauth_cred_t);
 uid_t kauth_cred_getuid(kauth_cred_t);
 uid_t kauth_cred_geteuid(kauth_cred_t);
 uid_t kauth_cred_getsvuid(kauth_cred_t);
 gid_t kauth_cred_getgid(kauth_cred_t);
 gid_t kauth_cred_getegid(kauth_cred_t);
 gid_t kauth_cred_getsvgid(kauth_cred_t);
 int kauth_cred_ismember_gid(kauth_cred_t, gid_t, int *);
 u_int kauth_cred_ngroups(kauth_cred_t);
 gid_t kauth_cred_group(kauth_cred_t, u_int);
 void kauth_cred_setuid(kauth_cred_t, uid_t);
 void kauth_cred_seteuid(kauth_cred_t, uid_t);
 void kauth_cred_setsvuid(kauth_cred_t, uid_t);
 void kauth_cred_setgid(kauth_cred_t, gid_t);
 void kauth_cred_setegid(kauth_cred_t, gid_t);
 void kauth_cred_setsvgid(kauth_cred_t, gid_t);
 void kauth_cred_hold(kauth_cred_t);
 u_int kauth_cred_getrefcnt(kauth_cred_t);
 int kauth_cred_setgroups(kauth_cred_t, const gid_t *, size_t, uid_t,
     enum uio_seg);
 int kauth_cred_getgroups(kauth_cred_t, gid_t *, size_t, enum uio_seg);
 /* This is for sys_setgroups() */
 int kauth_proc_setgroups(struct lwp *, kauth_cred_t);
 int kauth_register_key(secmodel_t, kauth_key_t *);
 int kauth_deregister_key(kauth_key_t);
 void kauth_cred_setdata(kauth_cred_t, kauth_key_t, void *);
 void *kauth_cred_getdata(kauth_cred_t, kauth_key_t);
 int kauth_cred_uidmatch(kauth_cred_t, kauth_cred_t);
 void kauth_uucred_to_cred(kauth_cred_t, const struct uucred *);
 void kauth_cred_to_uucred(struct uucred *, const kauth_cred_t);
 int kauth_cred_uucmp(kauth_cred_t, const struct uucred *);
 void kauth_cred_toucred(kauth_cred_t, struct ki_ucred *);
 void kauth_cred_topcred(kauth_cred_t, struct ki_pcred *);
 kauth_action_t kauth_mode_to_action(mode_t);
 kauth_action_t kauth_extattr_action(mode_t);
 #define KAUTH_ACCESS_ACTION(access_mode, vn_vtype, file_mode)	\
 	(kauth_mode_to_action(access_mode) |			\
 	(FS_OBJECT_CAN_EXEC(vn_vtype, file_mode) ? KAUTH_VNODE_IS_EXEC : 0))
 kauth_cred_t kauth_cred_get(void);
 void kauth_proc_fork(struct proc *, struct proc *);
 void kauth_proc_chroot(kauth_cred_t cred, struct cwdinfo *cwdi);
 #endif	/* !_SYS_KAUTH_H_ */